0x002132 Skills Bugbounty Hunt CSRF — Development skill for Claude Code
Hunting skill for csrf vulnerabilities.
How to install 0x002132 Skills Bugbounty Hunt CSRF
Installs to ~/.claude/skills/s1n6h-bug-bounty-skills-0x002132-skills-bugbounty-hunt-csrf/SKILL.md
mkdir -p ~/.claude/skills/s1n6h-bug-bounty-skills-0x002132-skills-bugbounty-hunt-csrf && curl -fsSL https://raw.githubusercontent.com/S1N6H/Bug-Bounty-Skills/HEAD/skills/0x002132-skills-bugbounty-hunt-csrf.md -o ~/.claude/skills/s1n6h-bug-bounty-skills-0x002132-skills-bugbounty-hunt-csrf/SKILL.md Restart Claude Code, or start a new session, for it to be picked up.
What 0x002132 Skills Bugbounty Hunt CSRF does
name: hunt-csrf description: Hunting skill for csrf vulnerabilities. Built from 10 public bug bounty reports. Use when hunting csrf on any target. sources: github, hackerone_public report_count: 10
Crown Jewel Targets
CSRF becomes high-value when it touches **state-changing actions with account-level or financial consequences**. The highest-paying targets are:
- Account takeover vectors: OAuth/SSO flows (RelayState manipulation), social account linking/unlinking (Oculus-Faceboo
Alternatives in Development
- /hunt — Active vulnerability hunting on a target 1.8k ★
- Src Hunter Skill — 实战 SRC / 众测 / Bug bounty 漏洞挖掘 Claude Code skill — 19 个攻击类 playbook、305 个结构化 payload、263 个 WAF/EDR 绕过、2887 份 Ha 602 ★
- Offer Toolkit Skill — Full job-hunt Claude skill bundle — Job Description decoder + Resume builder (11 templates) + Behavioral Inter 335 ★
Full documentation available on GitHub
View Source RepositoryRelated Skills
0x002132 Skills Bugbounty Hunt Auth Bypass
Hunting skill for auth bypass vulnerabilities. Built from 4 public bug bounty reports. Use when hunting auth b
0x002132 Skills Bugbounty Hunt Business Logic
Hunting skill for business logic vulnerabilities. Built from 7 public bug bounty reports. Use when hunting bus
Claude Bug Bounty — Plugin Guide
This repo is a Claude Code plugin for professional bug bounty hunting across HackerOne, Bugcrowd, Intigriti, a
Axguard Auth
AuthZ / IDOR / JWT / CSRF footgun hunt. Usage: /axguard-auth [path]
Desktop Electron
Desktop application hunting — Electron / Tauri / WebView2. Static binary inspection + IPC fuzzing + proxied tr
Scope
Check if a target asset is in scope for the program before hunting or submitting. Reads program scope page, ch
Related Agents
Report Writer
Bug bounty report writer. Generates professional H1/Bugcrowd/Intigriti/Immunefi reports. Impact-first writing,
Mutation Hardener
Dual-mode mutation-testing agent. AUDIT mode runs the mutation tool over a scope and reports surviving mutants
Vuln Patcher
Writes minimal, verified fix patches for confirmed vulnerabilities as diff files under reports/, without modif